Enhance IPv6 ban functionality: add dynamic mask handling and prevent banning own addresses

2026-10-27 22:26:12 +01:00
parent fbe10b43d0
commit f6660709ce
5 changed files with 116 additions and 2 deletions
@@ -90,6 +90,11 @@ default_max_concurrent_http_conn_per_ip=50
 set_max_new_http_conn_per_second=true
 default_max_new_http_conn_per_second=200

+# ip6t-firewall-server:
+#     Prefix length for entries in 'ban_ipv6.list' given without mask.
+#
+default_ban_ipv6_mask=128
+

 # - Dovecot Service
 # -